book

Official Samba-3 HOWTO and Reference Guide, The, Second Edition

Name: Official Samba-3 HOWTO and Reference Guide, The, Second Edition
ISBN: 0131882228

by John H. Terpstra, Jelmer Vernooij

August 2005

Intermediate to advanced

944 pages

20h 24m

English

Pearson

Read now

Unlock full access

Copyright
Bruce Perens’ Open Source Series
About the Cover Artwork
Attribution
List of Examples
List of Figures
List of Tables
Foreword
Preface
Conventions Used
Introduction
What Is Samba?Why This Book?Book Structure and Layout

I. General Installation
1. How to Install and Test Samba
1.1. Obtaining and Installing Samba1.2. Configuring Samba (smb.conf)1.2.1. Configuration File Syntax1.2.2. Starting Samba1.2.3. Example Configuration1.2.3.1. Test Your Config File with testparm1.2.4. SWAT1.3. List Shares Available on the Server1.4. Connect with a UNIX Client1.5. Connect from a Remote SMB Client1.5.1. What If Things Don’t Work?1.5.2. Still Stuck?1.6. Common Errors1.6.1. Large Number of smbd Processes1.6.2. Error Message: open_oplock_ipc1.6.3. “The network name cannot be found”
2. Fast Start: Cure for Impatience
2.1. Features and Benefits2.2. Description of Example Sites2.3. Worked Examples2.3.1. Standalone Server2.3.1.1. Anonymous Read-Only Document Server2.3.1.2. Anonymous Read-Write Document Server2.3.1.3. Anonymous Print Server2.3.1.4. Secure Read-Write File and Print Server2.3.2. Domain Member Server2.3.2.1. Example Configuration2.3.3. Domain Controller2.3.3.1. Example: Engineering Office2.3.3.2. A Big OrganizationThe Primary Domain ControllerBackup Domain Controller
II. Server Configuration Basics
3. Server Types and Security Modes
3.1. Features and Benefits3.2. Server Types3.3. Samba Security Modes3.3.1. User Level Security3.3.1.1. Example Configuration3.3.2. Share-Level Security3.3.2.1. Example Configuration3.3.3. Domain Security Mode (User-Level Security)3.3.3.1. Example Configuration3.3.4. ADS Security Mode (User-Level Security)3.3.4.1. Example Configuration3.3.5. Server Security (User Level Security)3.3.5.1. Example Configuration3.4. Password Checking3.5. Common Errors3.5.1. What Makes Samba a Server?3.5.2. What Makes Samba a Domain Controller?3.5.3. What Makes Samba a Domain Member?3.5.4. Constantly Losing Connections to Password Server
4. Domain Control
4.1. Features and Benefits4.2. Single Sign-On and Domain Security4.3. Basics of Domain Control4.3.1. Domain Controller Types4.3.2. Preparing for Domain Control4.4. Domain Control: Example Configuration4.5. Samba ADS Domain Control4.6. Domain and Network Logon Configuration4.6.1. Domain Network Logon Service4.6.1.1. Example Configuration4.6.1.2. The Special Case of MS Windows XP Home Edition4.6.1.3. The Special Case of Windows 9x/Me4.6.2. Security Mode and Master Browsers4.7. Common Errors4.7.1. “$” Cannot Be Included in Machine Name4.7.2. Joining Domain Fails Because of Existing Machine Account4.7.3. The System Cannot Log You On (C000019B)4.7.4. The Machine Trust Account Is Not Accessible4.7.5. Account Disabled4.7.6. Domain Controller Unavailable4.7.7. Cannot Log onto Domain Member Workstation After Joining Domain
5. Backup Domain Control
5.1. Features and Benefits5.2. Essential Background Information5.2.1. MS Windows NT4-style Domain Control5.2.1.1. Example PDC Configuration5.2.2. LDAP Configuration Notes5.2.3. Active Directory Domain Control5.2.4. What Qualifies a Domain Controller on the Network?5.2.5. How Does a Workstation find its Domain Controller?5.2.5.1. NetBIOS Over TCP/IP Enabled5.2.5.2. NetBIOS Over TCP/IP Disabled5.3. Backup Domain Controller Configuration5.3.1. Example Configuration5.4. Common Errors5.4.1. Machine Accounts Keep Expiring5.4.2. Can Samba Be a Backup Domain Controller to an NT4 PDC?5.4.3. How Do I Replicate the smbpasswd File?5.4.4. Can I Do This All with LDAP?
6. Domain Membership
6.1. Features and Benefits6.2. MS Windows Workstation/Server Machine Trust Accounts6.2.1. Manual Creation of Machine Trust Accounts6.2.2. Managing Domain Machine Accounts using NT4 Server Manager6.2.3. On-the-Fly Creation of Machine Trust Accounts6.2.4. Making an MS Windows Workstation or Server a Domain Member6.2.4.1. Windows 200x/XP Professional Client6.2.4.2. Windows NT4 Client6.2.4.3. Samba Client6.3. Domain Member Server6.3.1. Joining an NT4-type Domain with Samba-36.3.2. Why Is This Better Than security = server?6.4. Samba ADS Domain Membership6.4.1. Configure smb.conf6.4.2. Configure /etc/krb5.conf6.4.3. Create the Computer Account6.4.3.1. Possible Errors6.4.4. Testing Server Setup6.4.5. Testing with smbclient6.4.6. Notes6.5. Sharing User ID Mappings between Samba Domain Members6.6. Common Errors6.6.1. Cannot Add Machine Back to Domain6.6.2. Adding Machine to Domain Fails6.6.3. I Can’t Join a Windows 2003 PDC
7. Standalone Servers
7.1. Features and Benefits7.2. Background7.3. Example Configuration7.3.1. Reference Documentation Server7.3.2. Central Print Serving7.4. Common Errors
8. MS Windows Network Configuration Guide
8.1. Features and Benefits8.2. Technical Details8.2.1. TCP/IP Configuration8.2.1.1. MS Windows XP Professional8.2.1.2. MS Windows 20008.2.1.3. MS Windows Me8.2.2. Joining a Domain: Windows 2000/XP Professional8.2.3. Domain Logon Configuration: Windows 9x/Me8.3. Common Errors
III. Advanced Configuration
9. Network Browsing
9.1. Features and Benefits9.2. What Is Browsing?9.3. Discussion9.3.1. NetBIOS over TCP/IP9.3.2. TCP/IP without NetBIOS9.3.3. DNS and Active Directory9.4. How Browsing Functions9.4.1. Configuring Workgroup Browsing9.4.2. Domain Browsing Configuration9.4.3. Forcing Samba to Be the Master9.4.4. Making Samba the Domain Master9.4.5. Note about Broadcast Addresses9.4.6. Multiple Interfaces9.4.7. Use of the Remote Announce Parameter9.4.8. Use of the Remote Browse Sync Parameter9.5. WINS: The Windows Internetworking Name Server9.5.1. WINS Server Configuration9.5.2. WINS Replication9.5.3. Static WINS Entries9.6. Helpful Hints9.6.1. Windows Networking Protocols9.6.2. Name Resolution Order9.7. Technical Overview of Browsing9.7.1. Browsing Support in Samba9.7.2. Problem Resolution9.7.3. Cross-Subnet Browsing9.7.3.1. Behavior of Cross-Subnet Browsing9.8. Common Errors9.8.1. Flushing the Samba NetBIOS Name Cache9.8.2. Server Resources Cannot Be Listed9.8.3. I Get an ”Unable to browse the network” Error9.8.4. Browsing of Shares and Directories is Very Slow
10. Account Information Databases
10.1. Features and Benefits10.1.1. Backward Compatibility Account Storage Systems10.1.2. New Account Storage Systems10.2. Technical Information10.2.1. Important Notes About Security10.2.1.1. Advantages of Encrypted Passwords10.2.1.2. Advantages of Non-Encrypted Passwords10.2.2. Mapping User Identifiers between MS Windows and UNIX10.2.3. Mapping Common UIDs/GIDs on Distributed Machines10.2.4. Comments Regarding LDAP10.2.4.1. Caution Regarding LDAP and Samba10.2.5. LDAP Directories and Windows Computer Accounts10.3. Account Management Tools10.3.1. The smbpasswd Tool10.3.2. The pdbedit Tool10.3.2.1. User Account ManagementListing User and Machine AccountsAdding User AccountsDeleting AccountsChanging User AccountsDomain Account Policy Managment10.3.2.2. Account Migration10.4. Password Backends10.4.1. Plaintext10.4.2. smbpasswd: Encrypted Password Database10.4.3. tdbsam10.4.4. ldapsam10.4.4.1. Supported LDAP Servers10.4.4.2. Schema and Relationship to the RFC 2307 posixAccount10.4.4.3. OpenLDAP Configuration10.4.4.4. Initialize the LDAP Database10.4.4.5. Configuring Samba10.4.4.6. Accounts and Groups Management10.4.4.7. Security and sambaSamAccount10.4.4.8. LDAP Special Attributes for sambaSamAccounts10.4.4.9. Example LDIF Entries for a sambaSamAccount10.4.4.10. Password Synchronization10.4.4.11. Using OpenLDAP Overlay for Password Syncronization10.4.5. MySQL10.4.5.1. Creating the Database10.4.5.2. Configuring10.4.5.3. Using Plaintext Passwords or Encrypted Password10.4.5.4. Getting Non-Column Data from the Table10.4.6. XML10.5. Common Errors10.5.1. Users Cannot Logon10.5.2. Users Being Added to the Wrong Backend Database10.5.3. Configuration of auth methods
11. Group Mapping: Ms Windows and Unix
11.1. Features and Benefits11.2. Discussion11.2.1. Warning: User Private Group Problems11.2.2. Nested Groups: Adding Windows Domain Groups to Windows Local Groups11.2.3. Important Administrative Information11.2.3.1. Applicable Only to Versions Earlier than 3.0.1111.2.4. Default Users, Groups, and Relative Identifiers11.2.5. Example Configuration11.3. Configuration Scripts11.3.1. Sample smb.conf Add Group Script11.3.2. Script to Configure Group Mapping11.4. Common Errors11.4.1. Adding Groups Fails11.4.2. Adding Domain Users to the Workstation Power Users Group
12. Remote and Local Management: The Net Command
12.1. Overview12.2. Administrative Tasks and Methods12.3. UNIX and Windows Group Management12.3.1. Adding, Renaming, or Deletion of Group Accounts12.3.1.1. Adding or Creating a New Group12.3.1.2. Mapping Windows Groups to UNIX Groups12.3.1.3. Deleting a Group Account12.3.1.4. Rename Group Accounts12.3.2. Manipulating Group Memberships12.3.3. Nested Group Support12.3.3.1. Managing Nest Groups on Workstations from the Samba Server12.4. UNIX and Windows User Management12.4.1. Adding User Accounts12.4.2. Deletion of User Accounts12.4.3. Managing User Accounts12.4.4. User Mapping12.5. Administering User Rights and Privileges12.6. Managing Trust Relationships12.6.1. Machine Trust Accounts12.6.2. Interdomain Trusts12.7. Managing Security Identifiers (SIDS)12.8. Share Management12.8.1. Creating, Editing, and Removing Shares12.8.2. Creating and Changing Share ACLs12.8.3. Share, Directory, and File Migration12.8.3.1. Share Migration12.8.3.2. File and Directory Migration12.8.3.3. Share-ACL Migration12.8.3.4. Simultaneous Share and File Migration12.8.4. Printer Migration12.9. Controlling Open Files12.10. Session and Connection Management12.11. Printers and ADS12.12. Manipulating the Samba Cache12.13. Other Miscellaneous Operations
13. Identity Mapping (IDMAP)
13.1. Samba Server Deployment Types and IDMAP13.1.1. Standalone Samba Server13.1.2. Domain Member Server or Domain Member Client13.1.3. Primary Domain Controller13.1.4. Backup Domain Controller13.2. Examples of IDMAP Backend Usage13.2.1. Default Winbind TDB13.2.1.1. NT4-Style Domains (Includes Samba Domains)13.2.1.2. ADS Domains13.2.2. IDMAP_RID with Winbind13.2.3. IDMAP Storage in LDAP Using Winbind13.2.4. IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension13.2.4.1. IDMAP, Active Directory, and MS Services for UNIX 3.513.2.4.2. IDMAP, Active Directory and AD4UNIX
14. User Rights and Privileges
14.1. Rights Management Capabilities14.1.1. Using the “net rpc rights” Utility14.1.2. Description of Privileges14.1.3. Privileges Suppored by Windows 2000 Domain Controllers14.2. The Administrator Domain SID14.3. Common Errors14.3.1. What Rights and Privileges Will Permit Windows Client Administration?
15. File, Directory, and Share Access Controls
15.1. Features and Benefits15.2. File System Access Controls15.2.1. MS Windows NTFS Comparison with UNIX File Systems15.2.2. Managing Directories15.2.3. File and Directory Access Control15.2.3.1. Protecting Directories and Files from Deletion15.3. Share Definition Access Controls15.3.1. User- and Group-Based Controls15.3.2. File and Directory Permissions-Based Controls15.3.3. Miscellaneous Controls15.4. Access Controls on Shares15.4.1. Share Permissions Management15.4.1.1. Windows NT4 Workstation/Server15.4.1.2. Windows 200x/XP15.5. MS Windows Access Control Lists and UNIX Interoperability15.5.1. Managing UNIX Permissions Using NT Security Dialogs15.5.2. Viewing File Security on a Samba Share15.5.3. Viewing File Ownership15.5.4. Viewing File or Directory Permissions15.5.4.1. File Permissions15.5.4.2. Directory Permissions15.5.5. Modifying File or Directory Permissions15.5.6. Interaction with the Standard Samba “create mask” Parameters15.5.7. Interaction with the Standard Samba File Attribute Mapping15.5.8. Windows NT/200X ACLs and POSIX ACLs Limitations15.5.8.1. UNIX POSIX ACL Overview15.5.8.2. Mapping of Windows File ACLs to UNIX POSIX ACLs15.5.8.3. Mapping of Windows Directory ACLs to UNIX POSIX ACLs15.6. Common Errors15.6.1. Users Cannot Write to a Public Share15.6.2. File Operations Done as root with force user Set15.6.3. MS Word with Samba Changes Owner of File
16. File and Record Locking
16.1. Features and Benefits16.2. Discussion16.2.1. Opportunistic Locking Overview16.2.1.1. Exclusively Accessed Shares16.2.1.2. Multiple-Accessed Shares or Files16.2.1.3. UNIX or NFS Client-Accessed Files16.2.1.4. Slow and/or Unreliable Networks16.2.1.5. Multiuser Databases16.2.1.6. PDM Data Shares16.2.1.7. Beware of Force User16.2.1.8. Advanced Samba Oplocks Parameters16.2.1.9. Mission-Critical, High-Availability16.3. Samba Oplocks Control16.3.1. Example Configuration16.3.1.1. Disabling Oplocks16.3.1.2. Disabling Kernel Oplocks16.4. MS Windows Oplocks and Caching Controls16.4.1. Workstation Service Entries16.4.2. Server Service Entries16.5. Persistent Data Corruption16.6. Common Errors16.6.1. locking.tdb Error Messages16.6.2. Problems Saving Files in MS Office on Windows XP16.6.3. Long Delays Deleting Files over Network with XP SP116.7. Additional Reading
17. Securing Samba
17.1. Introduction17.2. Features and Benefits17.3. Technical Discussion of Protective Measures and Issues17.3.1. Using Host-Based Protection17.3.2. User-Based Protection17.3.3. Using Interface Protection17.3.4. Using a Firewall17.3.5. Using IPC$ Share-Based Denials17.3.6. NTLMv2 Security17.4. Upgrading Samba17.5. Common Errors17.5.1. Smbclient Works on Localhost, but the Network Is Dead17.5.2. Why Can Users Access Other Users’ Home Directories?
18. Interdomain Trust Relationships
18.1. Features and Benefits18.2. Trust Relationship Background18.3. Native MS Windows NT4 Trusts Configuration18.3.1. Creating an NT4 Domain Trust18.3.2. Completing an NT4 Domain Trust18.3.3. Interdomain Trust Facilities18.4. Configuring Samba NT-Style Domain Trusts18.4.1. Samba as the Trusted Domain18.4.2. Samba as the Trusting Domain18.5. NT4-Style Domain Trusts with Windows 200018.6. Common Errors18.6.1. Browsing of Trusted Domain Fails18.6.2. Problems with LDAP ldapsam and Older Versions of smbldap-tools
19. Hosting a Microsoft Distributed File System Tree
19.1. Features and Benefits19.2. Common Errors19.2.1. MSDFS UNIX Path Is Case-Critical
20. Classical Printing Support
20.1. Features and Benefits20.2. Technical Introduction20.2.1. Client to Samba Print Job Processing20.2.2. Printing-Related Configuration Parameters20.3. Simple Print Configuration20.3.1. Verifying Configuration with testparm20.3.2. Rapid Configuration Validation20.4. Extended Printing Configuration20.4.1. Detailed Explanation Settings20.4.1.1. The [global] Section20.4.1.2. The [printers] Section20.4.1.3. Any [my_printer_name] Section20.4.1.4. Print Commands20.4.1.5. Default UNIX System Printing Commands20.4.1.6. Custom Print Commands20.5. Printing Developments Since Samba-2.220.5.1. Point’n’Print Client Drivers on Samba Servers20.5.2. The Obsoleted [printer$] Section20.5.3. Creating the [print$] Share20.5.4. [print$] Stanza Parameters20.5.5. The [print$] Share Directory20.6. Installing Drivers into [print$]20.6.1. Add Printer Wizard Driver Installation20.6.2. Installing Print Drivers Using rpcclient20.6.2.1. Identifying Driver Files20.6.2.2. Obtaining Driver Files from Windows Client [print$] Shares20.6.2.3. Installing Driver Files into [print$]20.6.2.4. smbclient to Confirm Driver Installation20.6.2.5. Running rpcclient with adddriver20.6.2.6. Checking adddriver Completion20.6.2.7. Check Samba for Driver Recognition20.6.2.8. Specific Driver Name Flexibility20.6.2.9. Running rpcclient with setdriver20.7. Client Driver Installation Procedure20.7.1. First Client Driver Installation20.7.2. Setting Device Modes on New Printers20.7.3. Additional Client Driver Installation20.7.4. Always Make First Client Connection as root or “printer admin”20.8. Other Gotchas20.8.1. Setting Default Print Options for Client Drivers20.8.2. Supporting Large Numbers of Printers20.8.3. Adding New Printers with the Windows NT APW20.8.4. Error Message: “Cannot connect under a different Name”20.8.5. Take Care When Assembling Driver Files20.8.6. Samba and Printer Ports20.8.7. Avoiding Common Client Driver Misconfiguration20.9. The Imprints Toolset20.9.1. What Is Imprints?20.9.2. Creating Printer Driver Packages20.9.3. The Imprints Server20.9.4. The Installation Client20.10. Adding Network Printers without User Interaction20.11. The addprinter Command20.12. Migration of Classical Printing to Samba20.13. Publishing Printer Information in Active Directory or LDAP20.14. Common Errors20.14.1. I Give My Root Password but I Do Not Get Access20.14.2. My Print Jobs Get Spooled into the Spooling Directory, but Then Get Lost
21. Cups Printing Support
21.1. Introduction21.1.1. Features and Benefits21.1.2. Overview21.2. Basic CUPS Support Configuration21.2.1. Linking smbd with libcups.so21.2.2. Simple smb.conf Settings for CUPS21.2.3. More Complex CUPS smb.conf Settings21.3. Advanced Configuration21.3.1. Central Spooling vs. “Peer-to-Peer” Printing21.3.2. Raw Print Serving: Vendor Drivers on Windows Clients21.3.3. Installation of Windows Client Drivers21.3.4. Explicitly Enable “raw” Printing for application/octet-stream21.3.5. Driver Upload Methods21.4. Advanced Intelligent Printing with PostScript Driver Download21.4.1. GDI on Windows, PostScript on UNIX21.4.2. Windows Drivers, GDI, and EMF21.4.3. UNIX Printfile Conversion and GUI Basics21.4.4. PostScript and Ghostscript21.4.5. Ghostscript: The Software RIP for Non-PostScript Printers21.4.6. PostScript Printer Description (PPD) Specification21.4.7. Using Windows-Formatted Vendor PPDs21.4.8. CUPS Also Uses PPDs for Non-PostScript Printers21.5. The CUPS Filtering Architecture21.5.1. MIME Types and CUPS Filters21.5.2. MIME Type Conversion Rules21.5.3. Filtering Overview21.5.3.1. Filter Requirements21.5.4. Prefilters21.5.5. pstops21.5.6. pstoraster21.5.7. imagetops and imagetoraster21.5.8. rasterto [printers specific]21.5.9. CUPS Backends21.5.10. The Role of cupsomatic/foomatic21.5.11. The Complete Picture21.5.12. mime.convs21.5.13. “Raw” Printing21.5.14. application/octet-stream Printing21.5.15. PostScript Printer Descriptions for Non-PostScript Printers21.5.16. cupsomatic/foomatic-rip Versus Native CUPS Printing21.5.17. Examples for Filtering Chains21.5.18. Sources of CUPS Drivers/PPDs21.5.19. Printing with Interface Scripts21.6. Network Printing (Purely Windows)21.6.1. From Windows Clients to an NT Print Server21.6.2. Driver Execution on the Client21.6.3. Driver Execution on the Server21.7. Network Printing (Windows Clients and UNIX/Samba Print Servers)21.7.1. From Windows Clients to a CUPS/Samba Print Server21.7.2. Samba Receiving Job-Files and Passing Them to CUPS21.8. Network PostScript RIP21.8.1. PPDs for Non-PS Printers on UNIX21.8.2. PPDs for Non-PS Printers on Windows21.9. Windows Terminal Servers (WTS) as CUPS Clients21.9.1. Printer Drivers Running in “Kernel Mode” Cause Many Problems21.9.2. Workarounds Impose Heavy Limitations21.9.3. CUPS: A “Magical Stone”?21.9.4. PostScript Drivers with No Major Problems, Even in Kernel Mode21.10. Configuring CUPS for Driver Download21.10.1. cupsaddsmb: The Unknown Utility21.10.2. Prepare Your smb.conf for cupsaddsmb21.10.3. CUPS “PostScript Driver for Windows NT/200x/XP”21.10.4. Recognizing Different Driver Files21.10.5. Acquiring the Adobe Driver Files21.10.6. ESP Print Pro PostScript Driver for Windows NT/200x/XP21.10.7. Caveats to Be Considered21.10.8. Windows CUPS PostScript Driver Versus Adobe Driver21.10.9. Run cupsaddsmb (Quiet Mode)21.10.10. Run cupsaddsmb with Verbose Output21.10.11. Understanding cupsaddsmb21.10.12. How to Recognize If cupsaddsmb Completed Successfully21.10.13. cupsaddsmb with a Samba PDC21.10.14. cupsaddsmb Flowchart21.10.15. Installing the PostScript Driver on a Client21.10.16. Avoiding Critical PostScript Driver Settings on the Client21.11. Installing PostScript Driver Files Manually Using rpcclient21.11.1. A Check of the rpcclient man Page21.11.2. Understanding the rpcclient man Page21.11.3. Producing an Example by Querying a Windows Box21.11.4. Requirements for adddriver and setdriver to Succeed21.11.5. Manual Driver Installation in 15 Steps21.11.6. Troubleshooting Revisited21.12. The Printing *.tdb Files21.12.1. Trivial Database Files21.12.2. Binary Format21.12.3. Losing *.tdb Files21.12.4. Using tdbbackup21.13. CUPS Print Drivers from Linuxprinting.org21.13.1. foomatic-rip and Foomatic Explained21.13.1.1. 690 “Perfect” Printers21.13.1.2. How the Printing HOWTO Started It All21.13.1.3. Foomatic’s Strange Name21.13.1.4. cupsomatic, pdqomatic, lpdomatic, directomatic21.13.1.5. The Grand Unification Achieved21.13.1.6. Driver Development Outside21.13.1.7. Forums, Downloads, Tutorials, Howtos (Also for Mac OS X and Commercial UNIX)21.13.1.8. Foomatic Database-Generated PPDs21.13.2. foomatic-rip and Foomatic PPD Download and Installation21.14. Page Accounting with CUPS21.14.1. Setting Up Quotas21.14.2. Correct and Incorrect Accounting21.14.3. Adobe and CUPS PostScript Drivers for Windows Clients21.14.4. The page_log File Syntax21.14.5. Possible Shortcomings21.14.6. Future Developments21.14.7. Other Accounting Tools21.15. Additional Material21.16. Autodeletion or Preservation of CUPS Spool Files21.16.1. CUPS Configuration Settings Explained21.16.2. Preconditions21.16.3. Manual Configuration21.17. Printing from CUPS to Windows-Attached Printers21.18. More CUPS Filtering Chains21.19. Common Errors21.19.1. Windows 9x/Me Client Can’t Install Driver21.19.2. “cupsaddsmb” Keeps Asking for Root Password in Never-ending Loop21.19.3. “cupsaddsmb” or “rpcclient addriver” Emit Error21.19.4. “cupsaddsmb” Errors21.19.5. Client Can’t Connect to Samba Printer21.19.6. New Account Reconnection from Windows 200x/XP Troubles21.19.7. Avoid Being Connected to the Samba Server as the Wrong User21.19.8. Upgrading to CUPS Drivers from Adobe Drivers21.19.9. Can’t Use “cupsaddsmb” on Samba Server, Which Is a PDC21.19.10. Deleted Windows 200x Printer Driver Is Still Shown21.19.11. Windows 200x/XP Local Security Policies21.19.12. Administrator Cannot Install Printers for All Local Users21.19.13. Print Change, Notify Functions on NT Clients21.19.14. Win XP-SP121.19.15. Print Options for All Users Can’t Be Set on Windows 200x/XP21.19.16. Most Common Blunders in Driver Settings on Windows Clients21.19.17. cupsaddsmb Does Not Work with Newly Installed Printer21.19.18. Permissions on /var/spool/samba/ Get Reset After Each Reboot21.19.19. Print Queue Called “lp” Mishandles Print Jobs21.19.20. Location of Adobe PostScript Driver Files for “cupsaddsmb”21.20. Overview of the CUPS Printing Processes
22. Stackable Vfs Modules
22.1. Features and Benefits22.2. Discussion22.3. Included Modules22.3.1. audit22.3.2. extd_audit22.3.2.1. Configuration of Auditing22.3.3. fake_perms22.3.4. recycle22.3.5. netatalk22.3.6. shadow_copy22.3.6.1. Shadow Copy Setup22.4. VFS Modules Available Elsewhere22.4.1. DatabaseFS22.4.2. vscan
23. Winbind: Use of Domain Accounts
23.1. Features and Benefits23.2. Introduction23.3. What Winbind Provides23.3.1. Target Uses23.3.2. Handling of Foreign SIDs23.4. How Winbind Works23.4.1. Microsoft Remote Procedure Calls23.4.2. Microsoft Active Directory Services23.4.3. Name Service Switch23.4.4. Pluggable Authentication Modules23.4.5. User and Group ID Allocation23.4.6. Result Caching23.5. Installation and Configuration23.5.1. Introduction23.5.2. Requirements23.5.3. Testing Things Out23.5.3.1. Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris23.5.3.2. NSS Winbind on AIX23.5.3.3. Configure smb.conf23.5.3.4. Join the Samba Server to the PDC Domain23.5.3.5. Starting and Testing the winbindd Daemon23.5.3.6. Fix the init.d Startup ScriptsLinuxSolarisRestarting23.5.3.7. Configure Winbind and PAMLinux/FreeBSD-Specific PAM ConfigurationSolaris-Specific Configuration23.6. Conclusion23.7. Common Errors23.7.1. NSCD Problem Warning23.7.2. Winbind Is Not Resolving Users and Groups
24. Advanced Network Management
24.1. Features and Benefits24.2. Remote Server Administration24.3. Remote Desktop Management24.3.1. Remote Management from NoMachine.Com24.4. Network Logon Script Magic24.4.1. Adding Printers without User Intervention24.4.2. Limiting Logon Connections
25. System and Account Policies
25.1. Features and Benefits25.2. Creating and Managing System Policies25.2.1. Windows 9x/ME Policies25.2.2. Windows NT4-Style Policy Files25.2.2.1. Registry Spoiling25.2.3. MS Windows 200x/XP Professional Policies25.2.3.1. Administration of Windows 200x/XP Policies25.2.3.2. Custom System Policy Templates25.3. Managing Account/User Policies25.4. Management Tools25.4.1. Samba Editreg Toolset25.4.2. Windows NT4/200x25.4.3. Samba PDC25.5. System Startup and Logon Processing Overview25.6. Common Errors25.6.1. Policy Does Not Work
26. Desktop Profile Management
26.1. Features and Benefits26.2. Roaming Profiles26.2.1. Samba Configuration for Profile Handling26.2.1.1. NT4/200x User Profiles26.2.1.2. Windows 9x/Me User Profiles26.2.1.3. Mixed Windows Windows 9x/Me and NT4/200x User Profiles26.2.1.4. Disabling Roaming Profile Support26.2.2. Windows Client Profile Configuration Information26.2.2.1. Windows 9x/Me Profile Setup26.2.2.2. Windows NT4 Workstation26.2.2.3. Windows 2000/XP Professional26.2.3. User Profile Hive Cleanup Service26.2.4. Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations26.2.5. Profile Migration from Windows NT4/200x Server to Samba26.2.5.1. Windows NT4 Profile Management Tools26.2.5.2. Side Bar Notes26.2.5.3. moveuser.exe26.2.5.4. Get SID26.3. Mandatory Profiles26.4. Creating and Managing Group Profiles26.5. Default Profile for Windows Users26.5.1. MS Windows 9x/Me26.5.1.1. User Profile Handling with Windows 9x/Me26.5.2. MS Windows NT4 Workstation26.5.3. MS Windows 200x/XP26.6. Common Errors26.6.1. Configuring Roaming Profiles for a Few Users or Groups26.6.2. Cannot Use Roaming Profiles26.6.3. Changing the Default Profile26.6.4. Debugging Roaming Profiles and NT4-style Domain Policies
27. Pam-Based Distributed Authentication
27.1. Features and Benefits27.2. Technical Discussion27.2.1. PAM Configuration Syntax27.2.1.1. Anatomy of /etc/pam.d Entries27.2.2. Example System Configurations27.2.2.1. PAM: Original Login Config27.2.2.2. PAM: Login Using pam_smbpass27.2.3. smb.conf PAM Configuration27.2.4. Remote CIFS Authentication Using winbindd.so27.2.5. Password Synchronization Using pam_smbpass.so27.2.5.1. Password Synchronization Configuration27.2.5.2. Password Migration Configuration27.2.5.3. Mature Password Configuration27.2.5.4. Kerberos Password Integration Configuration27.3. Common Errors27.3.1. pam winbind Problem27.3.2. Winbind Is Not Resolving Users and Groups
28. Integrating Ms Windows Networks with Samba
28.1. Features and Benefits28.2. Background Information28.3. Name Resolution in a Pure UNIX/Linux World28.3.1. /etc/hosts28.3.2. /etc/resolv.conf28.3.3. /etc/host.conf28.3.4. /etc/nsswitch.conf28.4. Name Resolution as Used within MS Windows Networking28.4.1. The NetBIOS Name Cache28.4.2. The LMHOSTS File28.4.3. HOSTS File28.4.4. DNS Lookup28.4.5. WINS Lookup28.5. Common Errors28.5.1. Pinging Works Only One Way28.5.2. Very Slow Network Connections28.5.3. Samba Server Name-Change Problem
29. Unicode/Charsets
29.1. Features and Benefits29.2. What Are Charsets and Unicode?29.3. Samba and Charsets29.4. Conversion from Old Names29.5. Japanese Charsets29.5.1. Basic Parameter Setting29.5.2. Individual Implementations29.5.3. Migration from Samba-2.2 Series29.6. Common Errors29.6.1. CP850.so Can’t Be Found
30. Backup Techniques
30.1. Features and Benefits30.2. Discussion of Backup Solutions30.2.1. BackupPC30.2.2. Rsync30.2.3. Amanda30.2.4. BOBS: Browseable Online Backup System
31. High Availability
31.1. Features and Benefits31.2. Technical Discussion31.2.1. The Ultimate Goal31.2.2. Why Is This So Hard?31.2.2.1. The Front-End Challenge31.2.2.2. Demultiplexing SMB Requests31.2.2.3. The Distributed File System Challenge31.2.2.4. Restrictive Constraints on Distributed File Systems31.2.2.5. Server Pool Communications31.2.2.6. Server Pool Communications Demands31.2.2.7. Required Modifications to Samba31.2.3. A Simple Solution31.2.4. High-Availability Server Products31.2.5. MS-DFS: The Poor Man’s Cluster31.2.6. Conclusions
32. Handling Large Directories
33. Advanced Configuration Techniques
33.1. Implementation33.1.1. Multiple Server Hosting33.1.2. Multiple Virtual Server Personalities33.1.3. Multiple Virtual Server Hosting
IV. Migration and Updating
34. Upgrading from Samba-2.X to Samba-3.0.20
34.1. Quick Migration Guide34.2. New Features in Samba-334.3. Configuration Parameter Changes34.3.1. Removed Parameters34.3.2. New Parameters34.3.3. Modified Parameters (Changes in Behavior)34.4. New Functionality34.4.1. Databases34.4.2. Changes in Behavior34.4.3. Passdb Backends and Authentication34.4.4. LDAP34.4.4.1. New Schema34.4.4.2. New Suffix for Searching34.4.4.3. IdMap LDAP Support
35. Migration from NT4 PDC to Samba-3 Pdc
35.1. Planning and Getting Started35.1.1. Objectives35.1.1.1. Domain Layout35.1.1.2. Server Share and Directory Layout35.1.1.3. Logon Scripts35.1.1.4. Profile Migration/Creation35.1.1.5. User and Group Accounts35.1.2. Steps in Migration Process35.2. Migration Options35.2.1. Planning for Success35.2.2. Samba-3 Implementation Choices
36. Swat: The Samba Web Administration Tool
36.1. Features and Benefits36.2. Guidelines and Technical Tips36.2.1. Validate SWAT Installation36.2.1.1. Locating the SWAT File36.2.1.2. Locating the SWAT Support Files36.2.2. Enabling SWAT for Use36.2.3. Securing SWAT through SSL36.2.4. Enabling SWAT Internationalization Support36.3. Overview and Quick Tour36.3.1. The SWAT Home Page36.3.2. Global Settings36.3.3. Share Settings36.3.4. Printers Settings36.3.5. The SWAT Wizard36.3.6. The Status Page36.3.7. The View Page36.3.8. The Password Change Page
V. Troubleshooting
37. The Samba Checklist
37.1. Introduction37.2. Assumptions37.3. The Tests
38. Analyzing and Solving Samba Problems
38.1. Diagnostics Tools38.1.1. Debugging with Samba Itself38.1.2. Tcpdump38.1.3. Ethereal38.1.4. The Windows Network Monitor38.1.4.1. Installing Network Monitor on an NT Workstation38.1.4.2. Installing Network Monitor on Windows 9x/Me38.2. Useful URLs38.3. Getting Mailing List Help38.4. How to Get Off the Mailing Lists
39. Reporting Bugs
39.1. Introduction39.2. General Information39.3. Debug Levels39.3.1. Debugging-Specific Operations39.4. Internal Errors39.5. Attaching to a Running Process39.6. Patches
VI. Reference Section
40. How to Compile Samba
40.1. Access Samba Source Code via Subversion40.1.1. Introduction40.1.2. Subversion Access to samba.org40.1.2.1. Access via SVNweb40.1.2.2. Access via Subversion40.2. Accessing the Samba Sources via rsync and ftp40.3. Verifying Samba’s PGP Signature40.4. Building the Binaries40.4.1. Compiling Samba with Active Directory Support40.4.1.1. Installing the Required Packages for Debian40.4.1.2. Installing the Required Packages for Red Hat Linux40.4.1.3. SuSE Linux Package Requirements40.5. Starting the smbd nmbd and winbindd40.5.1. Starting from inetd.conf40.5.2. Alternative: Starting smbd as a Daemon40.5.2.1. Starting Samba for Red Hat Linux40.5.2.2. Starting Samba for Novell SUSE Linux
41. Portability
41.1. HPUX41.2. SCO UNIX41.3. DNIX41.4. Red Hat Linux41.5. AIX: Sequential Read Ahead41.6. Solaris41.6.1. Locking Improvements41.6.2. Winbind on Solaris 9
42. Samba and Other Cifs Clients
42.1. Macintosh Clients42.2. OS2 Client42.2.1. Configuring OS/2 Warp Connect or OS/2 Warp 442.2.2. Configuring Other Versions of OS/242.2.3. Printer Driver Download for OS/2 Clients42.3. Windows for Workgroups42.3.1. Latest TCP/IP Stack from Microsoft42.3.2. Delete .pwl Files After Password Change42.3.3. Configuring Windows for Workgroups Password Handling42.3.4. Password Case Sensitivity42.3.5. Use TCP/IP as Default Protocol42.3.6. Speed Improvement42.4. Windows 95/9842.4.1. Speed Improvement42.5. Windows 2000 Service Pack 242.6. Windows NT 3.1
43. Samba Performance Tuning
43.1. Comparisons43.2. Socket Options43.3. Read Size43.4. Max Xmit43.5. Log Level43.6. Read Raw43.7. Write Raw43.8. Slow Logins43.9. Client Tuning43.10. Samba Performance Problem Due to Changing Linux Kernel43.11. Corrupt tdb Files43.12. Samba Performance is Very Slow
44. Ldap and Transport Layer Security
44.1. Introduction44.2. Configuring44.2.1. Generating the Certificate Authority44.2.2. Generating the Server Certificate44.2.3. Installing the Certificates44.3. Testing44.4. Troubleshooting
45. Samba Support
45.1. Free Support45.2. Commercial Support
46. Dns and Dhcp Configuration Guide
46.1. Features and Benefits46.2. Example Configuration46.2.1. Dynamic DNS46.2.2. DHCP Server
47. Manual Pages
47.1. netSynopsisDescriptionOptionsCommands47.2. nmbdSynopsisDescriptionOptionsFilesSignalsSee Also47.3. nmblookupSynopsisDescriptionOptionsExamplesSee Also47.4. pdbeditSynopsisDescriptionOptionsNotesSee Also47.5. profilesSynopsisDescriptionOptions47.6. rpcclientSynopsisDescriptionOptionsCommands47.7. smbcaclsSynopsisDescriptionOptionsACL FormatExit Status47.8. smbclientSynopsisDescriptionOptionsOperationsNotesEnvironment VariablesInstallationDiagnostics47.9. smb.confSynopsisFile FormatSection DescriptionsSpecial SectionsParametersVariable SubstitutionsName ManglingNote About Username/Password ValidationExplanation of Each ParameterWarningsSee Also47.10. smbcquotasSynopsisDescriptionOptionsQuota_Set_ComandExit Status47.11. smbdSynopsisDescriptionOptionsFilesLimitationsEnvironment VariablesPam InteractionDiagnosticsTDB FilesSignalsSee Also47.12. smbpasswdSynopsisDescriptionFile FormatSee Also47.13. smbpasswdSynopsisDescriptionOptionsNotesSee Also47.14. smbstatusSynopsisDescriptionOptionsSee Also47.15. smbtreeSynopsisDescriptionOptions47.16. tdbbackupSynopsisDescriptionOptionsCommands47.17. tdbdumpSynopsisDescription47.18. testparmSynopsisDescriptionOptionsFilesDiagnosticsSee Also47.19. wbinfoSynopsisDescriptionOptionsExit StatusSee Also47.20. winbinddSynopsisDescriptionOptionsName and ID ResolutionConfigurationExample SetupNotesSignalsFilesSee Also
A. Gnu General Public License
A.1. PreambleA.2. Terms and Conditions for Copying, Distribution and ModificationA.2.1. Section 0A.2.2. Section 1A.2.3. Section 2A.2.4. Section 3A.2.5. Section 4A.2.6. Section 5A.2.7. Section 6A.2.8. Section 7A.2.9. Section 8A.2.10. Section 9A.2.11. Section 10A.2.12. No Warranty Section 11A.2.13. Section 12A.3. How to Apply These Terms to Your New Programs
Glossary

Overview

Fully Updated to Reflect Major Improvements and Configuration Changes in Samba-3.0.11 through 3.0.20+!

You’ve deployed Samba: Now get the most out of it with today’s definitive guide to maximizing Samba performance, stability, reliability, and power in your production environment. Direct from members of the Samba Team, The Official Samba-3 HOWTO and Reference Guide, Second Edition, offers the most systematic and authoritative coverage of Samba’s advanced features and capabilities. It has been extensively updated to reflect major improvements in the Samba-3.0 series of releases and additional performance enhancements in Samba-3.0.20 and later.

Use this book to go far beyond basic deployment, leveraging all of Samba’s components, from directory services to remote administration. Use it to find practical optimization techniques for any environment, from the workgroup to the enterprise. Use it to find detailed guidance and best practices for troubleshooting and problem solving. And, if your background is in Windows networking, use this book to get up to speed rapidly with Samba network administration in Linux/UNIX environments.

Coverage includes

NEW! User Rights and Privileges features and their impact on default system behavior

NEW! Expanded LDAP capabilities, the new Winbind subsystem, and Samba’s improved ACL handling

NEW! Detailed coverage of the powerful Samba-3.x net local/remote administration utility

NEW! Comprehensive documentation of IDMAP functionality

NEW! Proven techniques for improving performance with large directories

NEW! Samba integration with Windows Server 2003 and the latest versions of Active Directory

Advanced techniques: interdomain trusts, loadable VFS file system drivers, distributed authentication, desktop profile management, CUPS printing, high availability, and more

Contains a dramatically improved, more-detailed index

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Official Samba-3 HOWTO and Reference Guide, The

Publisher Resources

ISBN: 0131882228Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills